What is a firewall?

A filter that decides what network traffic is allowed in and out.

Last reviewed October 18, 2026 · See the sources · Download this explainer (PDF)

In short: a firewall sits between your device (or your home network) and the internet, and blocks traffic you didn't ask for. Your computer and your home Wi-Fi router very likely already have one. The main thing to do is make sure it's turned on.

How it works, in plain words

Think of a firewall as the front-desk guard of a building. Messages from the internet arrive all the time. The firewall checks each one against its rules and turns away the ones that weren't invited or look harmful. U.S. cybersecurity guidance (CISA) describes firewalls as shielding your computer or network from "malicious or unnecessary network traffic."

The two kinds you probably already have

CISA's advice: having a firewall matters more than which kind you use.

What a firewall doesn't do

A firewall can't stop you from being tricked. If you click a link in a phishing message or install something harmful yourself, the firewall usually lets it through, because you asked for it. That's why habits like the 10-second pause still matter.

What to do

Common questions

Do I need to buy a firewall? Usually not for a home. Your computer and most home routers already include one.

Can a firewall stop all hackers? No. It blocks a lot of unwanted traffic, but it's one layer. Updates, strong passwords, and two-step verification are the others.

Which kind of firewall is best? According to U.S. cybersecurity guidance (CISA), having one turned on matters more than which kind you use.

Sources

Checked on October 18, 2026. Next review: by October 2027.